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For : DIGITAL DATA WATERMARKING SYSTEM USING 

NOVEL WATERMARK INSERTION AND DETECTION 
METHODS 

PRELIMINARY AMENDMENT 

Hon. Commissioner of Patents and Trademarks 
Box PCT 

Washington, D.C. 20231 
Sir: 

In the US national phase application of PCT/EP00/04053 filed 
herewith, please enter the following amendments: 

IN THE SPECIFICATION: 

Please amend the specification as follows: 

On Page 1, line 3, please insert the following paragraph: 

~ This application claims the benefit, under 35 U.S.C. § 365 of 
International Application PCT/EP00/04053, filed May 5, 2000, which was published 
in accordance with PCT Article 21(2) on December 7, 2000 in English and which 
claims the benefit of French patent application No. 9907139 filed June 1, 1999.-- 
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IN THE CLAIMS: 

Please amend the claims as follows. A marked-up version of the 
claims is attached herewith. 

1. Method for inserting a watermark into data (x) representing a content to be 
protected, comprising the steps of: 

a) supplying a pseudo random noise sequence (v) to the input of a filter 
with predefined impulse response (h); and 

b) adding said filtered pseudo noise sequence (w) to said data. 

2. Method according to Claim 1, further comprising the steps of: 

c) performing a pseudo random interleaving (p) of the data (x) before 
step b); and 

d) performing an inverse interleaving after step b) so as to obtain the 
watermarked data. 

3. Method for detecting a watermark in data (r) representing a content 
received, comprising the steps of: 

i) performing a spectral analysis of said data; and 

ii) deducing therefrom whether said data include a pseudo noise sequence 
which has been filtered by a filter with predefined spectral response (H(f)). 

4. Method according to Claim 3 for detecting a watermark in data (r) 
representing a content received, the watermark being adapted to be inserted in 
accordance with the method according to Claim 2, furthercomprising: 

iii) performing, before step i), a pseudo random interleaving (p) of the 
data (r) received, which is identical to the interleaving performed in step c). 

5. Watermarking System using a watermark insertion method according to 
Claim 1 and a watermark detection method according to Claim 3, wherein a first 
series of parameters (v, h), the private key (K PR i), is used for the insertion of the 
watermark and a second series of parameters (|H(f)|), the public key (K PUB ), is used 
for the detection of the watermark, so that: 
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knowledge of the public key does not make it possible to know the 
private key; and 

knowledge of the watermark detection method and of the public key 
does not make it possible to delete or modify the watermark. 

6. Device for inserting a watermark into data (x) representing a content to be 
protected, comprising: 

means for generating a pseudo random noise sequence (v); 

filtering means [(16)] having a predefined impulse response (h) and 
which are adapted for receiving said pseudo noise sequence (v) and for supplying a 
filtered pseudo noise sequence (w); and 

means for adding said filtered pseudo noise sequence (w) to said data 

(x). 

7. Device according to Claim 6, further comprising: 

first means of pseudo random interleaving of the data (x) 
representative of the content to be protected so as to supply interleaved data (x), said 
interleaved data being supplied to the addition means so as to be added to the filtered 
pseudo noise sequence (w); and 

means of inverse interleaving of said first interleaving means, linked to 
the output of said addition means so as to supply the watermarked data. 

8. Device according to Claim 6, comprising: 

means for transforming the content to be protected into data (x) 
representative of said content; 

means for generating a modulation sequence (m) indicative of the 
maximum amount of noise which can be added to said data; 

wherein: 

first means of pseudo random interleaving of said data (x) 
representative of the content to be protected so as to supply interleaved data (x); 

second means of pseudo random interleaving, which are identical to 
the first adapted for receiving said modulation sequence (m) so as to supply an 
interleaved modulation sequence (Si); 
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multiplication means adapted for receiving, on the one hand the 
interleaved modulation sequence (m ), and on the other hand the filtered pseudo noise 
sequence (w), so as to supply the watermark; 

means of addition of the interleaved data (x) and of the watermark, 
the output of said addition means being linked to: 

means of inverse interleaving of said first and second interleaving 
means so as to supply the watermarked data (y); and 

means of inverse transformation of the watermarked data into a 
marked content. 

9. Device for detecting a watermark in data (r) representing a content 

received, comprising: 

means for estimating the power spectral density of said data; and 
means of likelihood testing of hypotheses so as to estimate whether 

said data include a pseudo noise sequence which has been filtered by a filter with 

predefined spectral response (H(f)). 

10. Device according to Claim 9, adapted for detecting a watermark inserted 
by an insertion device wherein: 

means of pseudo random interleaving of the data (r) representing the 
content received, which are adapted for performing the same interleaving (p) as said 
first interleaving means of the insertion device, said interleaved data ( r ) being 
supplied to said means for estimating the power spectral density. 

11. Device according to Claim 10, adapted for detecting a watermark inserted 
by an insertion device wherein: 

means for transforming the content received into data (r) 
representative of said content, said transforming means being adapted for performing 
the same transformation as the transforming means of the insertion device. 
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IN THE ABSTRACT: 

Please add the following Abstract. 

- The watermarking system uses a first series of parameters, 
the private key, for the insertion of the watermark, and a second series of parameters, 
the public key, for the detection of the watermark, so that knowledge of the public 
key does not make it possible to know the private key and does not make it possible 
to delete or modify the watermark. The insertion of the watermark is performed by 
adding a pseudo random noise sequence, filtered by a filter with impulse response, to 
the data to be watermarked. The detection of the watermark is performed by 
searching through the data received for whether they contain noise which has been 
filtered by a filter with predefined spectral response. Application to copy 
protection.™ 

REMARKS 

The specification has been amended to include a reference to the 
priority applications. 

The claims have been amended to remove reference indicia and to 
meet the requirement of the United States. 

To meet the requirements of the United States, the Abstract (as 
originally filed in the PCT application) is added. 
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No fee is believed to have been incurred by virtue of this amendment. 
However if a fee is incurred on the basis of this amendment, please charge such fee 
against deposit account 07-0832 



Respectfully submitted, 
Teddy Furon 
Pierre Duhamel 




David T. Shoneman 
Attorney for Applicant 
Registration No. 39,371 
609/734-9875 



THOMSON multimedia Licensing Inc. 

Patent Operation 

PO Box 5312 

Princeton, NJ 08543-5312 

November 20, 2001 
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MARKED UP VERSION OF THE AMENDED CLAIMS 

1. (AMENDED) Method for inserting a watermark into data (x) representing a 
content to be protected, [characterized in that it comprises the steps consisting in] 
comprising the steps of : 

a) supplying a pseudo random noise sequence (v) to the input of a filter 
with predefined impulse response (h); and 

b) adding said filtered pseudo noise sequence (w) to said data. 

2. (AMENDED) Method according to Claim 1, [characterized in that it 
furthermore comprises the steps consisting in] further comp rising the steps of: 

c) performing a pseudo random interleaving (p) of the data (x) before 
step b); and 

d) performing an inverse interleaving after step b) so as to obtain the 
watermarked data. 

3. (AMENDED) Method for detecting a watermark in data (r) representing a 
content received, [characterized in that it comprises the steps consisting in] 
comprising the steps of : 

i) performing a spectral analysis of said data; and 

ii) deducing therefrom whether said data include a pseudo noise sequence 
which has been filtered by a filter with predefined spectral response (H(f)). 

4. (AMENDED) Method according to Claim 3 for detecting a watermark in 
data (r) representing a content received, the watermark being adapted to be inserted 
in accordance with the method according to Claim 2, [characterized in that it 
furthermore comprises a step consisting in] further com prising: 

iii) performing, before step i), a pseudo random interleaving (p) of the 
data (r) received, which is identical to the interleaving performed in step c). 

5. (AMENDED) Watermarking System using a watermark insertion method 
according to [one of Claims 1 or 2] Claim 1 and a watermark detection method 
according to [one of Claims 3 or 4, characterized in that] Claim 3. wherein a first 
series of parameters (v, h), the private key (K PR i) ? is used for the insertion of the 
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watermark and a second series of parameters (|H(f)|), the public key (K PUB ), is used 
for the detection of the watermark, so that: 

knowledge of the public key does not make it possible to know the 

private key; and 

knowledge of the watermark detection method and of the public key 
does not make it possible to delete or modify the watermark. 

6. (AMENDED) Device for inserting a watermark into data (x) representing a 
content to be protected, [characterized in that it comprises] comprising: 

means for generating a pseudo random noise sequence (v); 

filtering means [(16)] having a predefined impulse response (h) and 
which are adapted for receiving said pseudo noise sequence (v) and for supplying a 
filtered pseudo noise sequence (w); and 

means [(22)] for adding said filtered pseudo noise sequence (w) to said 

data (x). 

7 . (AMENDED) Device according to Claim 6, [characterized in that it 
furthermore comprises] comprising : 

first means [(20)] of pseudo random interleaving of the data (x) 
representative of the content to be protected so as to supply interleaved data (x), said 
interleaved data being supplied to the addition means [(22)] so as to be added to the 
filtered pseudo noise sequence (w); and 

means [(24)] of inverse interleaving of said first [(20)] interleaving 
means, linked to the output of said addition means [(22)] so as to supply the 
watermarked data. 

8. (AMENDED) Device according to Claim 6, comprising: 

means [(10)] for transforming the content to be protected into data (x) 
representative of said content; 

means [(12)] for generating a modulation sequence (m) indicative of 
the maximum amount of noise which can be added to said data; 

[characterized in that it furthermore comprises] wherein : 

first means [(20)] of pseudo random interleaving of said data (x) 
representative of the content to be protected so as to supply interleaved data (x); 
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second means [(14)] of pseudo random interleaving, which are 
identical to the first [(20)] adapted for receiving said modulation sequence (m) so as 
to supply an interleaved modulation sequence (m ); 

multiplication means [(18)] adapted for receiving, on the one hand the 
interleaved modulation sequence (m), and on the other hand the filtered pseudo noise 
sequence (w), so as to supply the watermark; 

means [(22)] of addition of the interleaved data (x) and of the 
watermark, the output of said addition means being linked to: 

means [(24)] of inverse interleaving of said first [(20)] and second 
[(14)] interleaving means so as to supply the watermarked data (y); and 

means [(26)] of inverse transformation of the watermarked data into a 
marked content. 

9. (AMENDED) Device for detecting a watermark in data (r) representing a 
content received, [characterized in that it comprises] comprising: 

means [(34)] for estimating the power spectral density of said data; 

and 

means [(36)] of likelihood testing of hypotheses so as to estimate 
whether said data include a pseudo noise sequence which has been filtered by a filter 
with predefined spectral response (H(f)). 

10. (AMENDED) Device according to Claim 9, adapted for detecting a 
watermark inserted by an insertion device [according to one of Claims 7 or 8, 
characterized in that it comprise] wherein : 

means [(32)] of pseudo random interleaving of the data (r) 
representing the content received, which are adapted for performing the same 
interleaving (p) as said first interleaving means [(20)] of the insertion device, said 
interleaved data ( r ) being supplied to said means [(34)] for estimating the power 
spectral density. 
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UNAMENDED) Device according to Claim 10, adapted for detecting a 
watermark inserted by an insertion device [according to Claim 8, characterized in that 
it furthermore comprises] wherein : 

means [(30)] for transforming the content received into data (r) 
representative of said contend said transforming means being adapted for performing 
the same transformation as the transforming means [(10)] of the insertion device. 
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WO 00/74371 PCT/EPOO/04053 

Digital data watermarking system using novel watermark 
insertion and detection methods 



The present invention relates to the field of 
5 watermarking of digital data* It relates more 
particularly to a system for watermarking data using 
novel watermark insertion and detection methods as well 
as to devices for implementing these methods* 

Recent methods for protecting against the 

10 illicit copying of digital data use the principle of 
data watermarking which consists in inserting a marking 
item, commonly referred to as a "watermark'*, into a 
multimedia content (still image, video, sound, etc*} in 
an imperceptible manner. The watermark can for example 

15 be a signal indicating that the content may not be 
copied or any other item allowing the supplier of the 
multimedia content to detect illegal copies. 

In order to play its role perfectly, the 
watermark must be robust to transformations of the 

20 watermarked content, whether these transformations be 
made intentionally by a pirate who wishes to erase the 
watermark, or whether they result from distortions 
which occurred during the transmission of the signal 
containing the watermarked data. 

25 Various data watermarking techniques are known 

from the prior art. Reference may in particular be made 
to the documents EP-A-0 828 372, EP-A-0 840 513, WO-A- 
98/03014 or WO-A-98/54897 which describe methods for 
inserting watermarks into data to be protected and 

30 methods for detecting the presence of such watermarks 
in the data. 

A scheme which is generally used to describe 
the principle of data watermarking is that of Figure 1. 
A first part 1 relates to the insertion of a hidden 

35 item W (the watermark) into a content to be protected 
C. This results in a watermarked content CT. Part 2 
relates to the detection of the presence of the item W 
in the content received CT. An additional datum K is 
also necessary in the process for inserting and 

4 0 detecting the watermark. This datum K which must be 
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shared in a secret manner by the device for inserting 
and detecting the watermark is referred to as the key 
by analogy with so-called symmetric or private-key 
cryptography systems, 
5 For example, a known watermarking technique 

consists in adding a pseudo random noise sequence to 
data which are to be watermarked. The detection process 
is carried out, in this case, by performing a 
correlation calculation: the data received are declared 

10 watermarked if the correlation with the reference 
pseudo noise sequence (used for the insertion of the 
watermark) is greater than a given threshold. In this 
example, the reference pseudo noise sequence 
constitutes rhe key K of the data watermarking scheme 

15 of Figure 1. 

The problem with this scheme is that each 
entity capable of detecting the watermark must share 
the same key K as the entity which inserted the 
watermark. In this case, the entity capable of 

20 detecting the watermark can furthermore delete it or 
modify it, thereby doing away with all the benefit of 
the initial watermarking of the data. Consequently, a 
supplier of content protected by watermarking should 
not communicate his key K, which served for the 

25 insertion of the watermark, other than in a secret 
manner to trusted entities. This considerably limits 
the possibilities of using data watermarking in 
numerous fields. 

In particular, in the field of consumer 

30 electronic appliances, it is well known that it is 
almost impossible, at any event at reasonable cost, to 
store secret parameters in an appliance or in software 
contained in such an appliance. Smart cards, which are 
regarded as the only pieces of equipment allowing the 

35 secure storage of a secret parameter, are not 
themselves powerful enough to perform the calculations 
connected with a watermark detection process. 

In the example described above where the 
watermarking is carried out by adding a pseudo random 
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noise sequence to the data which are to be watermarked, 
even if the reference pseudo noise sequence is stored 
secretly in the watermark detection device, it has been 
demonstrated that a pirate can theoretically discover 
5 the reference sequence and thus delete the watermark 
from the data by observing the output from the detector 
as a function of a large number of different input 
signals . 

The invention aims to solve the aforesaid 
10 problems. 

To this end, the invention relates to a method 
for inserting a watermark into data representing a 
content to be protected. According to the invention, 
the method comprises the steps consisting in: 
15 a) supplying a pseudo random noise sequence to 

the input of a filter with predefined impulse response; 
and 

b) adding the filtered pseudo noise sequence to 
the data. 

20 According to a preferred aspect of the 

invention, the method furthermore comprises the steps 
consisting in: 

c) performing a pseudo random interleaving of 
the data before step b) ; and 

25 d) performing an inverse interleaving after 

step b) so as to obtain the watermarked data. 

The invention also relates to a method for 
detecting a watermark in data representing a content 
received, characterized in that it comprises the steps 

30 consisting in: 

i) performing a spectral analysis of the data; 

and 

ii) deducing therefrom whether the data include 
a pseudo noise sequence which has been filtered by a 

35 filter with predefined spectral response. 

According to another preferred aspect of the 
invention, a pseudo random interleaving of the data 
received, which is identical to the interleaving 
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performed in step c) above, is performed before step 
i) . 

The invention also relates to a system for 
watermarking data using a watermark insertion method 
5 and a watermark detection method as those above. 
According- to_ _the invention, a first series of 
parameters, the private key, is used for the insertion 
of the watermark and a second series of parameters, the 
public key, is used for the detection of the watermark, 
10 so that: 

- knowledge of the public key does not make it 
possible to know the private key; and 

- knowledge of the method of detection and of 
the public key does not make it. possible to delete or 

15 modify the watermark. 

The invention also relates to a device for 
inserting a watermark into data representing a content 
to be protected- According to the invention, the device 
comprises : 

20 - means for generating a pseudo random noise 

sequence; 

- filtering means having a predefined impulse 
response and which are adapted for receiving the pseudo 
noise sequence and for supplying a filtered pseudo 

25 noise sequence; and 

- means for adding the filtered pseudo noise 
sequence to the data. 

According to a preferred embodiment of the 
invention, the device furthermore comprises: 

30 - first means of pseudo random interleaving of 

the data representative of the content to be protected 
so as to supply interleaved data, the interleaved data 
being supplied to the addition means so as to be added 
to the filtered pseudo noise sequence; and 

35 - means of inverse interleaving of the first 

interleaving means, linked to the output of the said 
addition means so as to supply the watermarked data. 

According to a particular embodiment of the 
invention, the device comprises: 
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- means for transforming the content to be 
protected into data representative of the content; 

- means for generating a modulation sequence 
indicative of the maximum amount of noise which can be 

5 added to the data; 

- first means of pseudo random interleaving of 
the data representative of the content to be protected 
so as to supply interleaved data; 

- second means of pseudo random interleaving, 
10 which are identical to the first adapted for receiving 

the modulation sequence so as to supply an interleaved 
modulation sequence; 

- multiplication means adapted for receiving, 
on the one hand the interleaved modulation sequence, 

15 and on the other hand the filtered pseudo noise 
sequence, so as to supply the watermark; 

- means of addition of the interleaved data and 
of the watermark, the output of the addition means 
being linked to: 

20 - means of inverse interleaving of the first 

and second interleaving means so as to supply the 
watermarked data; and 

- means of inverse transformation of the 
watermarked data into a marked content. 

25 The invention also relates to a device for 

detecting a watermark in data representing a content 
received. According to the invention, the device 
comprises : 

- means for estimating the power spectral 
30 density of the data; and 

- means of likelihood testing of hypotheses so 
as to estimate whether the data include a pseudo noise 
sequence which has been filtered by a filter with 
predefined spectral response. 

35 According to a particular embodiment, the 

device furthermore comprises: 

- means of pseudo random interleaving of the 
data representing the content received, which are 
adapted for performing the same interleaving as the 
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first interleaving means of the insertion device, the 
interleaved data being supplied to the means for 
estimating the power spectral density. 

According to another particular embodiment, the 
5 device furthermore comprises: 

- means for transforming the content received 
into data representative of the content, the 
transforming means being adapted for performing the 
same transformation as the transforming means of the 

10 insertion device. 

Other characteristics and advantages of the 
invention will become apparent on reading the following 
description of a particular embodiment, which is non- 
limiting, of the invention given with reference to the 

15 appended figures, among which: 

- Figure 1, described previously, illustrates a 
known scheme for watermarking digital data; 

- Figure 2 schematically represents a watermark 
insertion device according to the invention; 

20 - Figure 3 schematically represents a watermark 

detection device according to the invention; 

- Figure 4 illustrates a novel scheme for 
watermarking digital data according to the invention. 

Represented schematically in Figure 2 is a 
25 device according to the invention for inserting a 
watermark into a signal representative of a content to 
be protected. This signal can in particular be a 
digital video or audio signal or else a signal 
representing a still image such as a photograph or a 
30 computer-calculated synthetic image, or more generally, 
any signal representing a multimedia content. 

Firstly, the content to be protected is 
transformed by a transformation module 10 into a 
s&quence of digital data x = {x n }, n lying between 1 
35 and N. For example, if the content to be protected is 
an image comprising N pixels, the coefficients x n can 
correspond to the luminance of each pixel of the image. 
These may also be coefficients of a Discrete Fourier 
Transform of the signal representing the content to be 
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protected, or else coefficients of a Fourier-Mellin 
Transform or coefficients of a wavelet decomposition 
when the content to be protected is a still image. 

The data sequence x representing the content to 
5 be protected is transmitted on the one hand to a module 
HPM 12 which outputs a modulation sequence m = {m n }, Vn 
G [1..N]. The module HPM calculates this modulation 
sequence as a function of algorithms based on human 
perception models, such as Sarnoff's model of the eye. 

10 This sequence m = {m n } represents the maximum amount of 
noise which can be added to each coefficient x n without 
perceptible loss of quality. 

According to one aspect of the invention, the 
data sequence x is transmitted moreover to an 

15 interleaver 20, which performs a random permutation p 
of the coefficients x n so as to supply a sequence of 
interleaved coefficients x = {x pln) }. The purpose of 
this interleaving of the data sequence x will be 
explained subsequently . 

20 The modulation sequence m is also transmitted 

to an interleaver 14 which performs the same 
permutation p of the coefficients m n as that performed 
by the interleaver 20 so as to output an interleaved 
modulation sequence m = {m P ( n) } . 

25 In order to constitute the watermark which will 

be inserted into the data sequence x representing the 
content to be protected, a pseudo random noise 
generator (not represented) firstly supplies a pseudo 
noise sequence v = {v n }, Vn e [1..N], with Gaussian 

30 distribution. This pseudo noise sequence v is 
transmitted to the input of a filter 16, of Linear Time 
invariant (LTD type, whose impulse response is: 

h = {h n }/ Vn e [1..L] where L is an integer 
corresponding to the length of the filter; 

35 and whose spectral response is H(f), H(f) being 

the Fourier Transform of h. 

At the output of the filter 16 one obtains a 
filtered pseudo noise sequence w = {w n }, Vn e [1..N] 
satisfying the following equation (1): 
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w n =tv n . k -h k =h n ®v„ Vn e[1..N] (1) 

in which ® represents the convolution product. 
From this may be deduced, from the interference 
theorem, the following two equations (2) and (3): 

5 

^(r) = (h®li)®^ w (r) (2) 



in which <cw ( r) and ^(r) respectively represent 
the auto-correlation functions of w and of v; and 

10 

*~(fHH(fr<Mf) o) 



in which Oww(f) and O w (f) respectively 
represent the power spectral densities of (p^{r) and 

15 ^w(r) , that is to say their Fourier Transforms. 

Since v is a pseudo random noise sequence with 
Gaussian distribution, its spectrum, that is to say the 
function Ow(f ) , has a substantially flat shape. On the 
other hand, once this sequence v is filtered by the 

20 filter 16, the resulting sequence w exhibits a spectrum 
Oww(f) which is no longer flat on account of the term 
!H(f)l 2 . It is also important to note, so as to 
comprehend the rest of the invention, that knowledge of 
|H(f)i 2 (and by the same token, knowledge of the 

25 modulus of H(f):fH{f) i) does not make it possible to 
retrieve H(f) (and hence h) since there is an 
uncertainty with regard to the phase of H(f). 

Returning to Figure 2, the filtered pseudo 
noise sequence w is multiplied (multiplier 18) by the 

30 interleaved modulation sequence m and the resulting 
sequence, which constitutes the watermark, is added 
(adder 22) to the sequence of interleaved data x. 

The output sequence from the adder 22 is 
denoted y = {y P (n)l and satisfies the following 

35 equations (4) and (5): 



m i m ii MM iii n 1 m i n i m i 
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y*n)=^<n) + rapfn) ( h n®0 ( 4 ) 

y = x + m * (h ® v) (5) 

The power spectral density of the sequence of 

5 watermarked interleaved data y is given by the 

following equations (6) and (7): 

^(f) = 4>ii(f)+« M (f)-^(f) (6) 
(f ) = ' 5(f) + a; )+ (<£ • a; . £ h^] + ^ • aj • |H(f } 2 (7) 



10 



In equation (7), fi : and a 3 respectively 
represent the mean and the standard deviation of the 
sequence j = {j n } with j e {x r m, v}, 8(f) corresponds 



to the Dirac pulse and the expression 



V 



is 



15 equal to a constant. 

The sequence of watermarked interleaved data y 

is then transmitted to an inverse interleaver 24 which 
performs the operation inverse to the permutation p 
performed by the interleavers 20 and 14 so as to supply 

20 a sequence of watermarked data y = {y n } whose 
coefficients are in the same order as the initial order 
of the data x = {x n }. 

A transformation inverse to that performed by 
the transformation module 10 is then performed by the 

25 module 2 6 so as to obtain the marked content (or 
watermarked content) which is thus protected against 
illicit copying without the watermark being perceptible 
within the content. 

We shall now describe, in conjunction with 

30 Figure 3, a device for detecting a watermark in a 
received content when this watermark has been inserted 
into a content to be protected by a device such as that 
of Figure 2. 

The principle of the detection is based on the 

35 spectral analysis of the signal received. 
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The signal received is representative of the 
received content for which one will seek to determine 
whether or not it is watermarked. This content is of 
the same type as the content to be protected described 
5 previously. In the example which follows, it will be 
assumed that the content received is an image 
containing N pixels. 

The content received is firstly transmitted to 
a transformation module 30 which performs the same 

10 transformation operation as the module 10 of the 
watermark insertion device of Figure 2 so as to supply 
a data sequence r = {r n }, Vn e [l.,N] representing the 
content received. In our example, it is assumed that 
the luminances r n of the pixels of the image received 

15 are obtained as output from the transformation module 
30. 

If the content received were to correspond 
exactly to the watermarked content emanating from the 
device of Figure 2, that is to say if no transformation 
20 or distortion of the signal had taken place during 
transmission between the watermark insertion device and 
the detection device, then one would have: 
r = {r n } = y = {y n } 

In practice, this is not always the case since 
25 the signal sometimes undergoes transformations during 
its transmission. 

Since the watermark has been inserted, in the 
device of Figure 2, into a sequence of interleaved data 
x, the data sequence r will, in order to detect the 
30 possible presence of a watermark in the content 
receiv€;d r be transmitted to an interleaver 32 
performing the same permutation p of the coefficients 
r n as that performed by the interleavers 20 and 14 of 
Figure 2 . 

35 A sequence of interleaved data r = {r p(n) } is 

obtained as output from the interleaver 32. 

It was seen previously that when the watermark 
inserted is a pseudo noise sequence filtered by a 
filter with impulse response h and with spectral 
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response H(f), the power spectral density of the 
(interleaved) data obtained y is expressed by relations 

(6) and (7) . 

The purpose of the interleaving of the data 
5 sequence x and of the modulation sequence m will now be 
apparent- Indeed, if the data sequence x represents the 
pixels of an image, its spectral density has a very 
structured shape with very large amplitude differences. 
The role of the interleaving of the data is to sever 

10 the statistical coherence of this sequence so that the 
spectral density of the sequence of interleaved data x 
has a substantially flat shape, such as that of a 
pseudo noise sequence with Gaussian distribution. 

Thus, if a watermark consisting of a pseudo 

15 noise sequence filtered by a filter with spectral 
response H(f) is added to this interleaved sequence, a 
data sequence is obtained whose power spectral density 
can be expressed by relation (7) in which the 
significant term IH(f)! 2 can be detected. 

20 The principle of the detection will therefore 

be based on the spectral analysis of the sequence x and 
on a Maximum Likelihood Ratio Hypothesis test (MLR 
Hypothesis test), the hypothesis tested being the 
following; if the sequence of interleaved data f 

25 contains noise, is it noise which has been filtered by 
a filter whose spectral response has a modulus similar 
to IH(f)I? If the response is yes, one will deduce 
from this that the noise present in the sequence r is a 
watermark and, in the contrary case, one will conclude 

30 from this that the content received was not 
watermarked. 

In practice, this analysis is based on 
calculations relating to spectral analysis and the 
likelihood testing of hypotheses which are described in 
35 detail in the work by K. Dzhaparidze, "Parameter 
Estimation and Hypothesis Testing in Spectral Analysis 
of Stationary Time Series" f Springer Series in 
Statistics, Springer-Verlag, 1986, to which reference 
may be made for further details. 
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Returning to Figure 3, the sequence of received 
interleaved data f is transmitted to a module 34 
performing a Pericdogram calculus. This calculus is 
aimed at estimating the power spectral density of the 
sequence r. A quantity I N (f) given by the following 
relation (8) 



2Xexp(2*ifk) (8) 



is obtained at output. 

10 This quantity is then transmitted to a module 

36 performing a MLR Hypothesis test so as to determine 
whether the content received is watermarked (output 
response "Y") or not (output response tr N TT ) . 

The module 36 tests the likelihood of two 

15 hypotheses: 

- according to the first hypothesis Go, the 
content received is not watermarked, hence the spectral 
density of the sequence r is substantially flat and can 
be estimated via the following relation (9): 



g,(fW+tf-6(f) (9) 



- according to the second hypothesis G if the 

content received is watermarked and the spectral 

25 density of the sequence r can be estimated via the 
following relation (10): 

g,(f)-fii-oMH(f)f + C (10) 



30 in which C is a constant and ct v is equal to 1 

(one preferably chooses the pseudo noise sequence v at 
the level of the insertion device so that a v is equal 
to 1, but one may equally choose other values) . 
Furthermore, \x m is normed at the level of the insertion 

35 device and equals for example 3. 

To estimate the likelihood of tne hypotheses Go 
and Gi/ the module 36 calculates two numbers ^w,o(£ 5 and 
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U Nfi (f ) representing the likelihoods of the hypotheses 
G 0 and Gi according to the following relation (11): 



U Nj (r)^^flog gl (f) + i||i 



df with i e {0, 1} (11) 



By then comparing these two numbers, the module 
36 deduces from this: 

if U N/ 1 ( r } >U N , 0 ( r ) , then the response of the 
detector is "Y" signifying that the content received is 

10 watermarked; and 

- if U N , i ( r ) <U N , 0 ( f ) , then the response of the 
detecror is "N" signifying that the content received is 
not watermarked. 

It is also possible, in a preferential manner, 

15 to calculate the difference (U N , i ( r ) -U N/0 { f ) ) and to 
perform the above comparisons only if this difference 
is greater than a predetermined threshold, this being 
so as to guarantee better exactness of detection. 

The watermark insertion and detection methods 

20 just described with reference to Figures 2 and 3 make 
it possible to produce a novel watermarking system 
which is illustrated by Figure 4 . In this novel system 
and according to a preferred aspect of the invention, a 
parameter which is referred to as the "private key" K ?RX 

25 is used for the insertion (100) of a watermark W into a 
content C, whereas another parameter which is referred 
to as the "public key" K PUB is used for the detection 
(200) of a watermark in a content received CT. The 
terms "private key" and "public key" are used by 

30 analogy with public key crytographic systems. It will 
be noted that here the watermark W is binary, that is 
to say that, either the content C is watermarked, or it 
is not, but W does not contain any item of its own. 

In the embodiment described above, the private 

35 key K P ri is formed by the pseudo random noise sequence v 
as well as by the impulse response h of the filter 16 
(Fig. 2). The sequences v = {v n } and h = {h n } are in 
effect: indispensable to the calculation of the sequence 
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w = {w n } which is itself, after having been multiplied 
by the interleaved modulation sequence m , inserted 
into the data representing the content to be protected. 
The public key used to detect the watermark in 
5 the content received is for its part formed from the 
modulus of the spectral response of the filter 16 
|H(f)|. Indeed, in the spectral analysis calculations 
performed (modules 34 and 36 of Figure 3) to detect the 
presence of a watermark in a content received CT, only 

10 the knowledge of |H(f)| is necessary. In particular, it 
is not necessary to know v and h (the private key) to 
perform the detection of the watermark. In actual fact, 
as was seen earlier in the description, the knowledge 
of (H(f) i does not suffice to know H(f) and hence h. 

15 A system is therefore obtained in which 

knowledge of the public key does not make it possible 
to deduce the private key from this. Also, not knowing 
the private key, it is impossible for the device 
performing the detection of the watermark to delete it 

20 or to modify it. The detection can therefore be 
performed in a non-secure environment with no risk of 
the watermark being erased. 
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CLAIMS 

1. Method for inserting a watermark into data 
5 (x) representing a content to be protected, 

characterized in that it comprises the steps consisting 
in: 

a) supplying a pseudo random noise sequence (v) to 
the input of a filter with predefined impulse response 

10 (h) ; and 

b) adding said filtered pseudo noise sequence (w) 
to said data. 

2. Method according to Claim 1, characterized in 
that it furthermore comprises the steps consisting in: 

15 c) performing a pseudo random interleaving (p) of 

the data (x) before step b) ; and 

d) performing an inverse interleaving after step 
b) so as to obtain the watermarked data. 

3. Method for detecting a watermark in data (r) 
20 representing a content received, characterized in that 

it comprises the steps consisting in: 

i) performing a spectral analysis of said data; 

and 

ii) deducing therefrom whether said data include 
25 a pseudo noise sequence which has been filtered by a 

filter with predefined spectral response (H(f)). 

4. Method according to Claim 3 for detecting a 
watermark in data (r) representing a content received, 
the watermark being adapted to be inserted in 

30 accordance with the method according to Claim 2, 
characterized in that it furthermore comprises a step 
consisting in: 

iii) performing, before step i) , a pseudo random 
interleaving (p) of the data (r) received, which is 

35 identical to the interleaving performed in step c) . 

5. Watermarking System using a watermark 
insertion method according to one of Claims 1 or 2 and 
a watermark detection method according to one of Claims 
3 or 4, characterized in that a first series of 
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parameters (v, h) , the private key {K PRI }, is used for 
the insertion of the watermark and a second series of 
parameters (IH(f)i), the public key (K PUB ) , is used for 
the detection of the watermark, so that: 
5 - knowledge of the public key does not make it 

possible to know the private key; and 

knowledge of the watermark detection method and 
of the public key does not make it possible to delete 
or modify the watermark. 
10 6. Device for inserting a watermark into data 

(x) representing a content to be protected, 
characterized in that it comprises: 

means for generating a pseudo random noise 
sequence (v) ; 

15 - filtering means (16} having a predefined 

impulse response (h) and which are adapted for 
receiving said pseudo noise sequence (v) and for 
supplying a filtered pseudo noise sequence (w) ; and 

- means (22) for adding said filtered pseudo 
20 noise sequence (w) to said data (x) . 

7 . Device according to Claim 6, characterized in 
that it furthermore comprises: 

- first means (20) of pseudo random interleaving 
of the data (x) representative of the content to be 

25 protected so as to supply interleaved data (x), said 
interleaved data being supplied to the addition means 
(22) so as to be added to the filtered pseudo noise 
sequence (w) ; and 

- means (24) of inverse interleaving of said 
30 first (20) interleaving means, linked to the output of 

said addition means (22) so as to supply the 
watermarked data. 

8. Device according to Claim 6, comprising: 
means (10) for transforming the content to be 

35 protected into data (x) representative of said content; 

means (12) for generating a modulation sequence 
(m) indicative of the maximum amount of noise which can 
be added to said data; 

characterized in that ir furthermore comprises: 



WO 00/74371 



PCT/EF00/04053 



17 

first means (20) of pseudo random interleaving 
of said data (x) representative of the content to be 
protected so as to supply interleaved data (x); 

second means (14) of pseudo random 
5 interleaving, which are identical to the first (20) 
adapted for receiving said modulation sequence (m) so 
as to supply an interleaved modulation sequence (m); 

multiplication means (18) adapted for 
receiving, on the one hand the interleaved modulation 
10 sequence (£), and on the other hand the filtered 
pseudo noise sequence (w) , so as to supply the 
watermark; 

means (22) of addition of the interleaved data 
(x) and of the watermark, the output of said addition 
15 means being linked to: 

means (24) of inverse interleaving of said 
first (20) and second (14) interleaving means so as to 
supply the watermarked data (y) ; and 

means (26) of inverse transformation of the 
20 watermarked data into a marked content. 

9. Device for detecting a watermark in data (r) 
representing a content received, characterized in that 
it comprises: 

means (34) for estimating the power spectral 
25 density of said data; and 

means (36) of likelihood testing of hypotheses 
so as to estimate whether said data include a pseudo 
noise sequence which has been filtered by a filter with 
predefined spectral response (H(f)). 
30 10. Device according to Claim 9, adapted for 

detecting a watermark inserted by an insertion device 
according to one of Claims 7 or 8, characterized in 
that it comprises: 

means (32) of pseudo random interleaving of the 
35 data (r) representing the content received, which are 
adapted for performing the same interleaving (p) as 
said first interleaving means (20) of the insertion 
device, said interleaved data (r) being supplied to 
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said means (34) for estimating the power spectral 
density* 

11. Device according to Claim 10 , adapted for 
detecting a watermark inserted by an insertion device 
5 according to Claim 8, characterized in that it 
furthermore comprises : 

means (30) for transforming the content 
received into data fr) representative of said content r 
said transforming means being adapted for performing 
10 the same transformation as the transforming means (10) 
of the insertion device. 
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